 |
 | When the clamwin will have the real-time scanner???????????? |  |
gianpaolomapacpac@yahoo.c
Joined: 05 Dec 2010 |
Posts: 0 |
Location: Philippines |
|
 |
Posted: Thu Dec 09, 2010 3:40 pm |
|
 |
 |
 |
 |
When the clamwin antivirus will have the real-time scanner?????, you guys can do the real-time scanner engine using the visual sudio 2010 or the borland delphi..... ClamWin is a great antivirus as far as I know... Free and useful!
|
|
 |
 | |  |
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Thu Dec 09, 2010 4:17 pm |
|
 |
 |
 |
 |
Hello:
The ClamWin project has been developing a real-time scanner (version 1.0) now for a couple of years. The problem is time and money. The two developers must make a living for themselves and their family, so they cannot really devote much time to the project. It is all they can do to port the Clam AV changes over to Windows with each new Clam version. They have had several volunteers to finish it; however, no one has stuck with it, but the code is about 50% done now. What is left is to add browser and USB protection and decide what to do about the real-time scanner. They are now thinking of integrating ClamSentinel for the real-time scan. Sentinel is not a kernel-mode scanner, but it has good heuristics, so using it can speed up the development.
The developers decided to partner with the Ask Toolbar people to get revenue to finish the project, and they now have revenue. It is not enough to pay a Western programmer, however, so they are trying to hire someone from India or Eastern Europe (Ukraine). They have talked to a couple of people, but nothing has come of it yet. I think they will probably have a ClamWin 1.0 sometime late next year.
In the meantime, the Clam Sentinel real-time add-in does a pretty good job at letting users scan with ClamWin in real-time. It does not repair viruses, but it is able to detect about 60% of new, unknown Windows PE file malware with its own heuristic scanner, and it has the ClamWin/Clam scanner and AV signatures. It also scans USB drives. It scans files when they are added to, copied, or modified on the computer.
Regards,
Bob
|
|
 |
 | Scan Programs in Memory hourly |  |
JoTraGo
Joined: 18 May 2011 |
Posts: 0 |
Location: Cape Town |
|
 |
Posted: Wed May 18, 2011 9:56 am |
|
 |
 |
 |
 |
A compromise which I have found works well is using Clamwins facilty to scan programs in memory as often as possible, whihc is once every hour
I create an empty directory called clamwin
Set up a sheduled scan to run every hour tageted at the empty clamwin directoy
Check the "Scan Programs in Memory" option.
The result is a scan which runs very quickly (about 90 seconds on my machine), and is very unobrtrusive, I never notice it running while I am working.
It checks all programs loaded in memory, which hopefully should catch any nasties which have become resident.
I combine this with the freeware SpybotS&D which IS a real time scanner for malware but not viruses.
Hope this may be useful to people
JoTraGo
|
|
 |
 | |  |
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Wed May 18, 2011 12:39 pm |
|
 |
 |
 |
 |
That is a pretty good way to go, Jo. Malwarebytes adds a scan of the autostart folder to a memory scan, and they call it a "flash" scan. I do that when working malware, but I also add my users\appdata\local\Bob folder, and system32\drivers. It does take several more minutes than the memory scan alone. I wish the ClamWin developers would add the ability to do some sort of quick scan. Scanning the entire computer for malware is, for the most part, wasted, as it will more than likely be found in just a few places.
Regards,
|
|
 |
 | |  |
zaaylo
Joined: 06 Mar 2012 |
Posts: 0 |
Location: rajkot |
|
 |
Posted: Tue Mar 06, 2012 5:45 am |
|
 |
 |
 |
 |
alch wrote: |
From the brief analysis of the TechPro I can conclude that it use 2 approaches to "automate" scanning:
1) Monitors changes to files using ReadDirectoryChanges API calls. This is a notification only API and it is not possible to block writing of an infected file to disk. Therefore it is very easy to circumvent such protection by executing a file programatically before a user takes action. Possibilities include dismissing the virus warning dialog, etc.
2) Changes the way files are opened in Windows Explorer (Run action) and scans them first. Although it helps within Windows Explorer, a fil will run undetected when executed from command line or another program.
In ClamWin we consciously decided not to go this way and not implement the 2 features listed above for one major reason: if the protection is not comprehensive and can be bypassed with ease, then such protection creates a fals feel of security with a user and can do more harm then good.
ClamWin version has full-featured file system filtering and will block any read access to an infected file. ClamWin v1 is a major rewrite with no code from 0.xx codebase and cannot be introduced gradually (we would if we could). |
Good analyze.
Are these two features really giving performances in realtime?
|
|
 |
 | |  |
boilingcategory
Joined: 13 Mar 2012 |
Posts: 0 |
Location: united states |
|
 |
Posted: Tue Mar 13, 2012 4:49 pm |
|
 |
 |
 |
 |
What I am looking for is automatic scanning of any removable disk when it is mounted.
|
|
 |
 | |  |
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Tue Mar 13, 2012 5:14 pm |
|
 |
 |
 |
 |
ClamWin is an on-demand scanner that only scans manually when you initiate it or as scheduled. I don't know your environment, but you might want to give Clam Sentinel a try. It allows you to use ClamWin as a real-time scanner and adds its own heuristic scan engine to detect malware for which there are no signatures. It is primarily for use on stand-alone computers (Win 98-Win 7) but does support multiple users (not necessarily networked) and multiple removable drives. It is free, open source software available at https://sourceforge.net/projects/clamsentinel/ on the web. I would not recommend using it in a networked environment or in a commercial business, for which you probably need heavily-tested, commercial security software.
Regards,
|
|
 |
 | |  |
theEIIapproach
Joined: 28 Mar 2012 |
Posts: 0 |
|
|
 |
Posted: Wed Mar 28, 2012 11:43 pm |
|
 |
 |
 |
 |
Just a follow-up question. Can you schedule the scanning even if the computer is not on or not really on-time for the scanning schedule?
|
|
 |
 | |  |
 |
 | |  |
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Fri Apr 13, 2012 12:13 am |
|
 |
 |
 |
 |
Re: scheduled scans, the computer must be on for a scan to happen. A scan will complete as scheduled ifwhen the computer is on. If you want to scan at a non-scheduled time, you can do a manual scan via right-clicking on the directory or file while you are in Windows Explorer.
Re: dropping Avast, ClamWin is not a real-time scanner--it only scans on-demand, as scheduled or via a manual scan. If you surf the web, you need a real-time scanner like Avast for protection from drive-by downloads, exploits, and other malware. ClamWin makes a good backup scanner to a real-time scanner
The Clam Sentinel project at https://sourceforge.net/projects/clamsentinel/ on the web provides a free program that enables you to scan with ClamWin in real-time. Clam Sentinel uses ClamWin and its signatures when scanning, but it also has its own heuristic scan engine that can detect malware for which therre is no ClamWin signature. A new Clam Sentinel version (1.19) will be out in about a week, and it will have greatly-improved protection, but it does not yet offer protection that is as good as Avast. If you use ClamSentinel and ClamWin, I still recommend regular scans with Malwarebytes' free antimalware or Kaspersky's free TDSSKiller program (Norman's free Malware Cleaner or Dr. Web's free Cureit for older computers). First-time Clam Sentinel users should read the Simple Guide that comes in the ClamSentinel download package.
Regards,
|
|
 |
 | |  |
traducere tehnica
Joined: 07 May 2012 |
Posts: 0 |
|
|
 |
Posted: Mon May 07, 2012 6:22 am |
|
 |
 |
 |
 |
Can i purchase the software online?? i'd really use an antivirus pretty soon
|
|
GuitarBob
Joined: 09 Jul 2006 |
Posts: 9 |
Location: USA |
|
 |
Posted: Mon May 07, 2012 2:00 pm |
|
 |
 |
 |
 |
ClamWin and Clam Sentinel are free to use. Other free AVs are Security Essentials, (Microsoft), Panda Free Cloud (Panda), AntiVir (Avira) and Avast. Without knowing anything about your surfing habits, I would recommend Security Essentials if you have a valid copy of Windows. Panda Free Cloud would also be good if you can't use Security Essentials. Consider ClamWin as a "backup" scanner after you get used to one of the above--it will give some extra protection.
Regards,
|
|
r3zen
Joined: 08 May 2012 |
Posts: 0 |
|
|
 |
Posted: Fri May 11, 2012 2:06 pm |
|
 |
 |
 |
 |
I am using clam win atm .. but its good to know how to go about securing myself .. thanks for the advise!
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
All times are GMT
Page 5 of 5
|
|
|
Powered by phpBB © phpBB Group
Design by phpBBStyles.com | Styles Database.
Content © ClamWin Free Antivirus GNU GPL Free Software Open Source Virus Scanner. Free Windows Antivirus. Stay Virus Free with Free Software.
|  |